CVE-2023-46862

Summary

CVE-2023-46862 is a vulnerability affecting Linux kernels up to version 6.5.9. During a race condition with SQ thread exit, an io_uring/fdinfo.c io_uring_show_fdinfo NULL pointer dereference can occur, potentially leading to kernel crashes or even arbitrary code execution with the privileges of the affected system. This issue poses a significant risk to Linux users, particularly those with unpatched kernels, and necessitates prompt remediation through updates or other protective measures.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.